Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...DNN 4.6.2: I dislike these two error messagesDNN 4.6.2: I dislike these two error messages
Previous
 
Next
New Post
10/4/2007 12:42 AM
 

Site was running fine. After four or five hour up I got this error in the URL ( ! )

http://www.mywebsite.com/Default.aspx?tabid=35&error=SHUTDOWN+is+in+progress.%0d%0aLogin+fai111+for+user+'username'.+Only+administrators+may+connect+at+this+time.&content=0

Error message reveals db username.

You should consider having something like: 'Login failed for default db username'

Or something like that.


Another error that shows up when there is something wrong connecting to db is:

DotNetNuke Error: - Version 04.06.02

Cannot open database requested in login 'mydatabase'. Login fails. Login failed for user 'username'.

This one reveals db and username.

If those messages are defaults from ADO.NET and SQL server, perhaps catching and replacing with something else can help deter bad guys.

****

Where should I look for if I myself wanted to fix this?

 
New Post
10/4/2007 4:21 AM
 

there seems to be periodic stops for your database, maybe for administrative tasks, but without hands to your sql server this is difficult to diagnose. Did you make specific settings?


Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
10/4/2007 12:22 PM
 

I think he is commenting on the way the error messages are formatted, not asking for help on the particular problem.

 
New Post
10/4/2007 9:43 PM
 

Empulse wrote

I think he is commenting on the way the error messages are formatted, not asking for help on the particular problem.

 

You are right Empulse. It is the format.

Let's think a bit like a bad guy...imagine someone trying to hit your site so bad that can make it crash, your site reveals DB name and ConnectionString username. After a few techniques are executed to get control:

Hmm, it is DNN...Ok, runs on Windows, MS SQL Server, I've got DB name and username...so, this username maybe can do CRUD,..also I know there is a default user 'host', and 'admin', so let me try to get all users...hmm, nice got em...oh, this site has ecommerce...and, what module is that? ok...oh, but this one runs under Windows Authentication, yataa!!

Indeed, this info is revealed when there are problems with the DB. Also, I noticed that even when you have a Custom Error Page, these messages may appear.

So, again, I think is best to catch SQL error and rephrase error description instead of passing it from the DB, to DNN, to the browser. Make it less technical on the browser and send a really technical error message via email or IPhone to the MIS, developer, whoever.

Thanks.

 

 
New Post
10/5/2007 11:23 AM
 

I have a free HTTPModule that would potentially capture this error and not show it to the user, it all depends on how DNN's handling of the error is completed.  IF DNN's custom errors are turned off (within host settings) my method should be able to capture it.  (I have not fully tested it with DNN but I use it on all of my standard ASP.NET sites)

It is available for free at http://www.mitchelsellers.com, it even includes the ability to send an email with the detailed error to any e-mail address of choice.


-Mitchel Sellers
Microsoft MVP, ASPInsider, DNN MVP
CEO/Director of Development - IowaComputerGurus Inc.
LinkedIn Profile

Visit mitchelsellers.com for my mostly DNN Blog and support forum.

Visit IowaComputerGurus.com for free DNN Modules, DNN Performance Tips, DNN Consulting Quotes, and DNN Technical Support Services
 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...DNN 4.6.2: I dislike these two error messagesDNN 4.6.2: I dislike these two error messages


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out